Skills
Navigate
skills/holon-run/uxc/alchemy-openapi-skill/Gen Agent Trust Hub

alchemy-openapi-skill

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides configuration and documentation for the Alchemy Prices API. It uses the vendor's own repository (github.com/holon-run/uxc) for fetching the OpenAPI schema, which is consistent with the author context.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage sensitive API keys using environment variables (--secret-env ALCHEMY_API_KEY) or secret managers, avoiding hardcoded secrets or shell history exposure.
  • [COMMAND_EXECUTION]: The shell commands provided in SKILL.md and usage-patterns.md are standard setup and usage commands for the uxc tool. The validate.sh script is a typical maintenance script for ensuring file integrity and schema correctness.
  • [EXTERNAL_DOWNLOADS]: Downloads are restricted to the curated OpenAPI schema from the vendor's official GitHub repository, which is considered a safe and intended operation for this skill's functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 10:10 PM